Kamis, 08 Desember 2016

Ulasan 1

    In this post, I want to review a video from Youtube that is uploaded by Youtube account named Phillip Freeman. The title of the video is REDACTED - Public Key Encryption Intro with GnuPG. The video has duration 49 minutes and 47 seconds. To access the video, you can use the URL https://www.youtube.com/watch?v=SvlrGqi0_mU.

    In this video, the video maker, Phillip Freeman, introduces a public key encryption to the viewers, named GnuPG. In his introduction to this encryption, the topics focus on basic command line and concept of GnuPG and its relation with some file encrypting, like email, etc. The GnuPG is an open source PGP encryption system. PGP is an acronym for Pretty Good Privacy. PGP was found in 1991, created by Phil Zimmermann. The GnuPG itself is a strong cryptography that provides data privacy and data authentication.

    The GnuPG encryption system can generate keys. There are 2 part of keys, the public part and the private part. For the public part, it is distributed widely and not sensitive. For the private part, it is known only to the owner of the key. When a user wants to encrypt a file, his/her session key will be generated and encrypted for each recipient using his/her public key. When a user wants to decrypt a file, he/she must decrypt the session key using his/her own private key, and he/she must be the recipient of the encrypted file. In GnuPG, there is also a thing called signing. Signing is used to create digital signature by using the private key.

   To use the GnuPG, the user must generate a new key-pair first that will be used as their key. The user can also choose the key-type, key-size, and expiration date of the key. After that, he/she must fill the key-id, like the user's real name, email address, and also some comments for the key. The key is located in a file with .asc extension, which stands for ASCII text file. A file named pubring.gpg contains user's public key, while the scring.gpg file contains your secret key. You can also see the information of the other users' key with command line "--edit-key", as long as you have their public keys in your own computer. For the others, you can also set how far you trust other users' keys by changing the trust level To add the others' key to your own computer, you can use import command to import a key from a file. If the other wants to have your key, you can also export your key to a text file as well. Users can also share their signature with other through the key. But, the first thing to do before signing a key is to verify its authenticity.

    At the end of the video, Phillip Freeman shares some cheat sheets about GnuPG encryption system, like how to generate a key, how to revoke, how to import a key, etc.

    In my opinion, this video is great for someone who wants to know what is GnuPG encryption system and how to be able to use it for the first time. Phillip Freeman introduces the GnuPG so clearly, and he also gives some example about the encryption using GnuPG. Although, the quality of the making of the video is not so good. But, for overall, the video is quite interesting for them who wants to know GnuPG encryption system.

GitHub Account : https://github.com/joshiarheinier
URL Ulasan       : https://joshiarheinier.blogspot.com/2016/12/ulasan-1.html
Video URL         : https://www.youtube.com/watch?v=SvlrGqi0_mU
Video Duration   : 49 Minutes 47 Seconds
First Revision     : Thursday, December 8th 2016
Last Revision     : Friday, December 9th 2016

Tidak ada komentar:

Posting Komentar